2 Answers
- Newest
- Most votes
- Most comments
1
Hi,
It is not possible to restrict it by plain domain. Even if you add aws:referer as condition in your bucket policy, then clients can still add it and by pass it.
Instead, do it by restricting source ip: https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies.html#example-bucket-policies-IP
Finally, If you have CloudFront in front of the bucket, a more advanced way is to use WAF. https://docs.aws.amazon.com/waf/latest/developerguide/classic-web-acl-ip-conditions.html
Hope it helps ;)
0
You can setup custom bucket policy or else you can just paste the URL of the S3 image inside your blog and if you didn't share that URL with anyone, who is going to access it
answered 3 years ago
Relevant content
- asked a year ago

So does this mean that it is not possible to do hotlink protection?